CVSS 3.1 Score 7.8 of 10 (high)


Published May 3, 2024
Updated: May 23, 2024
CWE ID 416


CVE-2023-42091 is a vulnerability known as the Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability affects installations of Foxit PDF Reader and allows remote attackers to execute arbitrary code. To exploit this vulnerability, user interaction is required through visiting a malicious page or opening a malicious file. The flaw lies in the handling of Doc objects, where operations are performed on an object without validating its existence. This vulnerability poses a high risk to organizations as it can lead to unauthorized code execution in the context of the current process. It has a base severity rating of HIGH and requires LOCAL attack vector and REQUIRED user interaction.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-42091 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options